Re: [AppDB] - protect sql insert statements from injection attacks

2006-06-23 Thread Tony Lambregts
Chris Morgan wrote: Here is the new version. I've switched to the fully expanded method of writing out the sql. This is the same format used by several db wrapper libraries, in prepared sql statements and is the recommended style under c#/.net for queries. I've tested creating new users and

Re: [AppDB] - protect sql insert statements from injection attacks

2006-06-23 Thread Chris Morgan
Here is the new version. I've switched to the fully expanded method of writing out the sql. This is the same format used by several db wrapper libraries, in prepared sql statements and is the recommended style under c#/.net for queries. I've tested creating new users and distributions and sub